[Pkg-cups-devel] Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

Yves-Alexis Perez corsac at debian.org
Sat Dec 8 08:12:20 UTC 2012


On sam., 2012-12-08 at 01:58 +0100, Didier 'OdyX' Raboud wrote:
> Hi dear security team,
> 
> I propose to get CVE-2012-5519 (#692791) fixed with the attached debdiff.
> 
> It is a backport of the patches discussed on the upstream bug [#4223] for cups 
> 1.4.4, plus the needed packaging changes to make /etc/cups/cupsd.conf not a 
> configuration file anymore.
> 
> Note that contrary to what was done in unstable, the patch is added last, not 
> first.

To be honest, considering how invasive the patch is, I'd like it to stay
a bit in unstable. There already have been few correction in sid, so in
case there are more, it's better to include the relevant bits at first.

Regards,

-- 
Yves-Alexis



More information about the Pkg-cups-devel mailing list